Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File:                     hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier:          7mm6opvJxTVLjM6ShRkDazhOGh59rnTwVG6nOakKfuE=
Subject key identifier:   2F:68:CF:FB:15:CA:E6:DF:16:27:3C:66:84:3A:F2:5F:B6:7E:C5:C5
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer:       /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number:          80
Signing time:             Mon 11 May 2026 07:50:13 +0000
Manifest this update:     Mon 11 May 2026 07:50:12 +0000
Manifest next update:     Mon 18 May 2026 07:50:12 +0000
Files and hashes:         1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: VBJjVS37GSj35mafs8UbPY8pH7rroYsyXVqIBtmJjoI=)
                          2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: pV6RrpL0HFiSkSQ3Egen1lL8OO4gLgRAAJv9sHZbodQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
        Validity
            Not Before: May 11 07:50:12 2026 GMT
            Not After : May 18 07:50:12 2026 GMT
        Subject: CN=6a018a35-e42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:ed:57:62:b5:38:b9:01:6a:d2:c4:c8:40:
                    d4:7a:a4:63:11:99:bd:ae:8b:e1:9d:a0:91:54:79:
                    e8:6d:d6:2d:63:2b:20:8b:fe:73:46:65:ca:66:13:
                    b1:66:0b:84:64:3c:ea:c4:f3:df:cd:9f:b0:67:99:
                    e2:8c:f1:a9:53:e8:3a:a8:ec:bd:b1:43:10:7d:cb:
                    71:a7:2d:bf:e0:e1:69:bd:2d:fb:2d:bd:0b:16:5e:
                    50:50:b9:97:b4:da:01:3e:4e:d1:f3:1b:f4:d8:a4:
                    13:ab:de:47:10:c1:4f:69:02:3a:30:4d:e6:1d:1e:
                    97:39:b9:e2:91:df:37:f2:e3:35:e8:c6:74:03:b0:
                    4c:ec:bf:8a:a9:6a:7c:7c:ac:13:9d:40:c8:36:cc:
                    1b:0b:e6:70:cc:fa:e0:60:48:1e:cc:8c:7c:f8:1d:
                    07:2b:8d:10:7d:2f:75:a8:92:85:c7:99:2f:87:28:
                    4a:60:12:5f:6f:dc:e1:52:89:ab:e0:a9:51:69:5c:
                    4b:03:37:2b:e0:bb:6b:b6:99:53:49:b2:41:4b:c9:
                    ba:8f:15:6d:61:b4:3e:e3:68:96:cd:00:ef:10:53:
                    db:82:d7:d5:ee:be:04:52:f8:1f:e0:cc:fc:c2:af:
                    65:36:cc:d9:c8:34:e3:33:46:30:b9:9f:10:0f:96:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:68:CF:FB:15:CA:E6:DF:16:27:3C:66:84:3A:F2:5F:B6:7E:C5:C5
            X509v3 Authority Key Identifier:
                keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:18:7a:70:e9:15:15:08:3d:1f:2b:73:46:e9:82:19:1e:21:
         06:07:07:b1:4a:35:17:a2:0f:de:12:0a:02:f4:b2:ed:b0:4c:
         b9:5d:6b:6e:e5:13:11:df:ed:46:3b:ae:e6:a7:4e:a9:91:c7:
         b0:be:4c:8e:c4:63:d9:fa:ba:86:94:70:1c:83:d9:e2:f2:11:
         56:be:b2:30:60:0d:3a:4d:5c:dc:df:ef:ea:26:72:a6:13:dd:
         12:58:b8:08:cd:af:e7:6f:44:ba:5c:50:69:3e:ab:5f:9b:3a:
         5c:f5:ea:b5:f8:38:11:17:58:b9:32:2d:23:79:38:a1:3c:78:
         4e:7d:9f:ac:8d:c8:21:00:ff:f0:28:b6:c6:ad:12:58:27:53:
         ad:ed:9a:f3:35:1a:4a:27:56:fd:e1:f2:01:7f:df:c0:f4:14:
         62:2a:fc:eb:6f:68:7c:a7:47:48:4e:76:73:43:76:f3:fc:41:
         58:0e:60:4d:52:78:1a:17:e5:03:59:27:93:ff:8d:12:d1:5c:
         d6:bb:e3:3f:6d:f3:1f:c7:a8:ee:8d:1a:d2:97:79:d1:97:b2:
         47:fa:05:f4:23:b8:80:bc:b3:b2:68:cc:90:55:9a:4f:b7:44:
         a9:f0:af:60:02:cb:0c:9c:40:1e:c6:1a:0c:24:11:fd:61:19:
         cf:f0:dd:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNEQUMxMTAvBgNVBAUTKDg0N0YyRTEyRUFCNTA2QTUwMTA5OTQ0MjA3QjFENzAy
NjY3N0YwOUIwHhcNMjYwNTExMDc1MDEyWhcNMjYwNTE4MDc1MDEyWjAYMRYwFAYD
VQQDEw02YTAxOGEzNS1lNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5aPtV2K1OLkBatLEyEDUeqRjEZm9rovhnaCRVHnobdYtYysgi/5zRmXKZhOx
ZguEZDzqxPPfzZ+wZ5nijPGpU+g6qOy9sUMQfctxpy2/4OFpvS37Lb0LFl5QULmX
tNoBPk7R8xv02KQTq95HEMFPaQI6ME3mHR6XObnikd838uM16MZ0A7BM7L+KqWp8
fKwTnUDINswbC+ZwzPrgYEgezIx8+B0HK40QfS91qJKFx5kvhyhKYBJfb9zhUomr
4KlRaVxLAzcr4LtrtplTSbJBS8m6jxVtYbQ+42iWzQDvEFPbgtfV7r4EUvgf4Mz8
wq9lNszZyDTjM0YwuZ8QD5YXzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9oz/sV
yubfFic8ZoQ68l+2fsXFMB8GA1UdIwQYMBaAFIR/LhLqtQalAQmUQgex1wJmd/Cb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RBQy83MjYwRkMwQzhG
MzkxMUYwODYzMkEwMzlDNEY5QUUwMi9oSDh1RXVxMUJxVUJDWlJDQjdIWEFtWjM4
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhKcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0RBQy83MjYwRkMwQzhGMzkxMUYwODYzMkEwMzlDNEY5QUUwMi9oSDh1RXVxMUJx
VUJDWlJDQjdIWEFtWjM4SnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnhh6cOkVFQg9HytzRumCGR4hBgcHsUo1F6IP3hIKAvSy7bBMuV1rbuUTEd/t
Rjuu5qdOqZHHsL5MjsRj2fq6hpRwHIPZ4vIRVr6yMGANOk1c3N/v6iZyphPdEli4
CM2v529EulxQaT6rX5s6XPXqtfg4ERdYuTItI3k4oTx4Tn2frI3IIQD/8Ci2xq0S
WCdTre2a8zUaSidW/eHyAX/fwPQUYir8629ofKdHSE52c0N28/xBWA5gTVJ4Ghfl
A1knk/+NEtFc1rvjP23zH8eo7o0a0pd50ZeyR/oF9CO4gLyzsmjMkFWaT7dEqfCv
YALLDJxAHsYaDCQR/WEZz/DdRw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:40:14 2026 by rpki-client